Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
File: z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft (raw, json)
Hash identifier: zwyvoqsabaV3Nl8Yra8lXTyszx15zxa1g9KBiERfRt4=
Subject key identifier: 32:18:21:B8:A7:CD:DD:7F:9D:44:3F:3D:C7:96:02:6C:40:33:E0:71
Authority key identifier: CF:C7:00:8C:6F:91:72:2D:C3:B1:27:52:75:58:EB:DA:BC:68:0C:E6
Certificate issuer: /CN=cfc7008c6f91722dc3b127527558ebdabc680ce6
Certificate serial: 0194BBCEDDCCF5CC6E1E6CF1703397F85085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
Manifest number: 0D8A
Signing time: Fri 31 Jan 2025 10:01:24 +0000
Manifest this update: Fri 31 Jan 2025 10:01:24 +0000
Manifest next update: Sat 01 Feb 2025 10:01:24 +0000
Files and hashes: 1: z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl (hash: ntoBboS3b7gLJyw48ai4h/h14WmN9yHWbsbcudK9wfU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:dd:cc:f5:cc:6e:1e:6c:f1:70:33:97:f8:50:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc7008c6f91722dc3b127527558ebdabc680ce6
Validity
Not Before: Jan 31 10:01:24 2025 GMT
Not After : Feb 1 10:01:24 2025 GMT
Subject: CN=321821b8a7cddd7f9d443f3dc796026c4033e071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:08:c0:c7:f3:a1:fb:b0:93:91:d1:ce:2d:9b:
1c:49:cf:63:e7:6d:08:8a:92:7c:ac:87:a2:67:d5:
18:71:69:cd:96:3a:56:d4:64:1e:c7:c8:d6:96:d1:
c4:1a:25:75:40:f8:52:6c:66:a0:d9:eb:70:3d:96:
43:a0:a5:18:44:31:aa:1f:52:bc:14:df:92:b9:1c:
66:f9:07:78:b4:da:2f:32:c6:a6:f9:8b:7f:2a:3a:
38:c6:12:0a:3e:f6:4d:4e:b8:18:df:b3:cd:a0:ac:
2a:12:19:78:06:29:8b:b8:4c:ba:2f:8b:32:60:de:
7d:3d:c8:fe:f6:34:0d:c9:9a:25:fb:cb:11:c9:5a:
db:18:c9:f6:be:d6:6b:19:a6:e5:7e:10:d3:6e:8a:
b5:cc:ba:cf:db:56:61:d2:d2:f4:c1:b0:23:c4:a9:
33:f5:27:ba:86:a6:ae:9c:b1:47:7b:40:eb:34:1c:
55:52:f8:ae:f8:af:7d:1e:9a:a7:91:5a:88:63:c0:
8a:11:68:16:4e:7a:58:db:48:42:89:3c:d9:c9:99:
64:c6:de:e4:18:8f:05:70:80:2e:27:c6:96:61:87:
71:ee:09:f7:f9:02:d9:27:81:64:3b:da:2e:73:fe:
2f:5f:16:46:ea:1f:87:6e:4a:01:24:87:4c:3e:bd:
d7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:18:21:B8:A7:CD:DD:7F:9D:44:3F:3D:C7:96:02:6C:40:33:E0:71
X509v3 Authority Key Identifier:
keyid:CF:C7:00:8C:6F:91:72:2D:C3:B1:27:52:75:58:EB:DA:BC:68:0C:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:56:49:e6:18:c1:58:b1:db:5e:63:ae:85:90:a4:ca:3e:69:
6d:c0:21:09:aa:87:17:30:91:b8:7d:ae:ae:7e:26:26:04:65:
e1:df:3f:a8:95:d1:e1:24:04:fa:3d:c0:2e:bb:c4:be:3d:7d:
91:47:11:e4:79:da:e9:50:f2:f3:14:bb:fa:c9:09:62:f7:d8:
91:9c:ac:95:c2:cb:03:a6:cf:1b:55:95:0a:ae:49:39:3f:f5:
4c:53:fb:fd:00:28:7b:ad:e9:94:b9:7b:d5:9a:1a:e2:d2:2a:
90:e2:88:00:5f:e9:fb:9f:cc:8c:52:8d:bf:6c:b8:6e:b6:c3:
e1:39:82:bb:94:02:21:0d:8e:1e:a2:82:56:f0:44:c8:bc:52:
bc:a8:ad:fc:9d:5c:f3:33:98:91:d8:6b:24:8d:a4:2a:df:94:
b3:5f:ed:95:ec:cd:c4:5f:a3:76:a4:b3:7b:e1:05:a2:b8:b0:
b8:84:b6:8f:35:64:ef:0a:99:5b:c6:2c:be:0a:d7:ec:5b:97:
b1:36:43:e5:d6:fc:6a:d4:5f:9b:75:13:58:d3:48:57:41:0e:
26:0c:0b:fd:a9:f0:e4:db:a3:1f:28:42:fe:f1:30:0c:45:ae:
25:fb:ef:c9:a1:f7:9f:f6:4a:7c:43:3a:69:1e:d2:f2:e6:e0:
f5:aa:5c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:33 2025 by rpki-client